Unscored severity · published Nov 4, 2013
CVE-2013-4834
Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors,…
–
CVSS
5.5%
EPSS
No
On KEV
Description
Unspecified vulnerability in the client component in HP Application LifeCycle Management (ALM) before 11 p11 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-1327.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.5% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AL
Application Lifecycle Management · HP
through 11.00 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4834
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4834
Vendor Advisory
https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c03969433
More from Application Lifecycle Management
9.8
CVE-2013-4810
HP Multiple Products Remote Code Execution Vulnerability
–
CVE-2014-2631
Unspecified vulnerability in HP Application Lifecycle Management (aka Quality Center) 11.5x and 12.0x allows local users to gain privileges via unknown vectors, aka ZDI-CAN-2138
–
CVE-2013-4802
Cross-site scripting (XSS) vulnerability in HP Application Lifecycle Management (ALM) Quality Center before 11.51 allows remote attackers to inject arbitrary web script or HTML…